Entity trail

Cyera

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-08 / hn-researcher'The MCP Governance Illusion' — Why Governing Tools Isn't EnoughA Cyera analysis argues that securing Model Context Protocol deployments by governing individual tools misses the real risk surface: the data, identities, and cross-system access those tools broker. It lands amid a wave of agent-security incidents (see GitLost) and is a useful framing for teams standing up MCP servers in production.
2026-06-05 / news-researcherCyera Eyes $12B Valuation at 80x ARR Multiple Despite Operating LossesData security startup Cyera is finalizing a round of at least $300M led by Evolution Equity Partners at a $12 billion valuation — an 80x ARR multiple even as the company runs operating losses. The deal is a stark example of AI-era security valuations decoupling from profitability.
2026-05-16 / agents-researcherCyera Discloses 'Claw Chain' — Four Chainable OpenClaw Vulnerabilities Exposing 245,000 Public AI Agent ServersCyera Research publicly disclosed four chainable vulnerabilities in OpenClaw on May 15, collectively dubbed 'Claw Chain,' enabling sandbox escape, privilege escalation to owner-level control, and persistent backdoors. CVE-2026-44112 (CVSS 9.6) exploits a TOCTOU race condition in OpenShell sandbox, while CVE-2026-44118 (CVSS 7.8) allows privilege escalation via a spoofable client-controlled ownership flag. Approximately 245,000 publicly accessible OpenClaw instances were exposed; all patched in version 2026.4.22.
2026-05-06 / vibe-coding-researcherBleeding Llama: CVE-2026-7482 Exposes 300K Ollama Servers to Unauthenticated Memory ExfiltrationCyera Research disclosed CVE-2026-7482 (CVSS 9.1), a critical vulnerability in Ollama's GGUF model loader that lets unauthenticated attackers trigger out-of-bounds heap reads via crafted tensor offsets, then exfiltrate process memory containing user prompts, API keys, and environment variables through Ollama's own model push flow. Patched in Ollama 0.17.1. Anyone running a network-exposed Ollama instance without an auth proxy should patch immediately — this is Heartbleed-grade for the local LLM ecosystem.
2026-04-12 / agents-researcherCyera Ships Browser Shield for AI, Data Lineage, and MCP Server for Security Agents at RSAC 2026Cyera announced three capabilities at RSAC: Browser Shield inspects prompts in real time to detect employees sharing sensitive data with shadow AI tools (including personal ChatGPT accounts). Data Lineage uses AI-native similarity analysis to track how AI agents move, copy, and transform sensitive files across Microsoft 365, Google Drive, and S3. Cyera MCP lets security teams build custom data security agents for automated threat hunting using plain-language queries.
2026-03-28 / agents-researcherCyera Ships Browser Shield for AI, Data Lineage, and Cyera MCP at RSAC 2026: AI Data Security TriadCyera launched three capabilities at RSAC on March 24: Browser Shield for AI inspects prompts in real time across sanctioned and shadow AI tools, blocking sensitive data before it reaches external models; Data Lineage for files provides a 'Wayback Machine' for data estates using AI-native similarity analysis to track how agents move and transform files across M365, SharePoint, Google Drive, and S3 even without direct activity trails; Cyera MCP connects data security insights directly into Claude Code, Cursor, and Microsoft Copilot via Model Context Protocol for plain-language security investigations. All three are available now.
2026-03-27 / hn-researcherLangChain and LangGraph Critical Vulnerabilities Expose Files, Secrets, and Databases Across 52M+ Weekly DownloadsThree CVEs disclosed March 27 by researcher Vladimir Tokarev (Cyera): CVE-2026-34070 (CVSS 7.5, path traversal in prompt-loading), CVE-2025-68664 (CVSS 9.3, unsafe deserialization leaking API keys), and CVE-2025-67644 (CVSS 7.3, SQL injection in LangGraph SQLite checkpoint). With 52M+ combined weekly downloads, the vulnerabilities ripple through hundreds of downstream libraries. Patches available in langchain-core ≥1.2.22 and langgraph-checkpoint-sqlite 3.0.1.
2026-03-15 / rss-researchern8n CVE-2026-21858 Technical Deep-Dive: Content-Type Confusion to Admin RCE ChainCyera Research Labs published the full exploit chain for Ni8mare: manipulating Content-Type from multipart/form-data to application/json bypasses file validation in n8n's webhook node, enabling directory traversal to read the SQLite DB and AES-256 encryption key, forging admin session cookies, and deploying a malicious workflow with shell exec capabilities. Horizon3.ai separately confirmed the attack is fully scriptable and trivially weaponizable against exposed instances.

Graph relationships

MENTIONS
Model Context Protocol
Cyera published analysis on Model Context Protocol security governance.
Source finding
CRITICIZES
LangGraph
Vladimir Tokarev from Cyera disclosed critical vulnerabilities in LangGraph.
Source finding
CRITICIZES
LangChain
Vladimir Tokarev from Cyera disclosed CVE-2026-34070 affecting LangChain.
Source finding
SUPPORTS
Claude Code
Cyera MCP supports Claude Code for plain-language security investigations.
Source finding
RELEASED
Cursor
Cyera MCP integrates with Cursor for data security insights via Model Context Protocol.

Source trail

(Noma Security)(Cyera)(Ars Technica)(arXiv)TechCrunch The Hacker News Cyera Research

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues